This IP address has been reported a total of
22
times from
18 distinct
sources.
34.28.61.234 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 8
reports;
Czechia
with 4
reports;
Switzerland
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
18
times;
Brute-Force
10
times;
Hacking
8
times;
Bad Web Bot
5
times;
Port Scan
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-21.
show less
Web App Attack
SSH
Hacking
Anonymous
Bot / scanning and/or hacking attempts: POST /actions HTTP/2.0, GET /.env::$DATA?raw HTTP/2.0, POST ...
show moreBot / scanning and/or hacking attempts: POST /actions HTTP/2.0, GET /.env::$DATA?raw HTTP/2.0, POST /login HTTP/2.0, GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_, GET /agents/.env HTTP/2.0, POST /api HTTP/2.0, GET /.env.local::$DATA?raw HTTP/2.0, GET /.env?.svg?.wasm?init HTTP/2.0, GET /.env.local?raw HTTP/2.0, POST /admin HTTP/2.0, GET /.env?import&url&inline HTTP/2.0, GET /@fs/root/.env?raw?? HTTP/2.0, GET /.env.production?raw HTTP/2.0, POST /_next/server HTTP/2.0, GET /@fs/proc/self/environ?import&raw?? HTTP/2.0, GET /@fs/.env?raw?? HTTP/2.0, POST /api/route HTTP/2.0, GET /.env.local?import&raw HTTP/2.0, GET /.env.production::$DATA?raw HTTP/2.0, POST /app HTTP/2.0, GET /.env?raw HTTP/2.0
show less
2026-10-21 20:45:06 GET /media../.env [301] && 2026-10-21 20:45:06 GET /static../.env [301] && 2026- ...
show more2026-10-21 20:45:06 GET /media../.env [301] && 2026-10-21 20:45:06 GET /static../.env [301] && 2026-10-21 20:45:06 GET /files../.env [301] && 197 more within 20 minutes
show less
Web App Attack
Anonymous
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
Anonymous
| Multiple common web attacks from same source ip. (multiple servers)
http-crawl-non_statics - IP: 34.28.61.234 - time="2026-10-21T18:40:40+02:00" level=info msg="(555f6 ...
show morehttp-crawl-non_statics - IP: 34.28.61.234 - time="2026-10-21T18:40:40+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-crawl-non_statics by ip 34.28.61.234 (US/396982) : 4h ban on Ip 34.28.61.234" module=db
show less
Attempting to probe for sensitive information accidently exposed via git config.
34.28.61.234 - - [ ...
show moreAttempting to probe for sensitive information accidently exposed via git config.
34.28.61.234 - - [21/Oct/2026:16:25:29 +0000] "GET /.git/config HTTP/2.0" 403 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
show less
